Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: TFFHNuI0SeRzzJ/4VyI2F+8pd3UziUvFFcRbt7n5P1s=
Subject key identifier: 81:23:F0:A2:CE:5E:6A:92:F9:5D:57:00:F0:EC:27:26:E6:1A:A8:7F
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 01989600C348445199B95AB01D2C97095BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 1023
Signing time: Sun 10 Aug 2025 22:01:29 +0000
Manifest this update: Sun 10 Aug 2025 22:01:29 +0000
Manifest next update: Mon 11 Aug 2025 22:01:29 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: MLVpAFNNu19OxDcSaPBpUing7Oy0hvAL6T3eHMbxUAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:c3:48:44:51:99:b9:5a:b0:1d:2c:97:09:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Aug 10 22:01:29 2025 GMT
Not After : Aug 11 22:01:29 2025 GMT
Subject: CN=8123f0a2ce5e6a92f95d5700f0ec2726e61aa87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:aa:e4:06:3a:77:da:4a:d2:46:70:4f:92:
a9:3e:b3:04:5a:69:c5:1c:dd:61:f0:5d:03:78:6a:
a3:cb:12:cd:a5:38:bc:ed:96:48:8c:bb:dc:fe:97:
a0:fc:88:94:30:b0:46:1c:32:0c:5c:90:18:54:5c:
f0:60:cb:58:83:f0:6e:ca:e2:55:45:95:c9:8c:f5:
5c:60:16:83:6f:76:15:bb:fa:21:4b:1e:13:ea:d4:
61:09:dc:64:40:bf:99:45:90:ac:b5:e2:eb:4e:ea:
1d:44:77:14:a3:36:2b:99:f3:d7:d9:da:38:c5:96:
04:65:8f:3d:f3:e7:14:02:23:47:b8:2c:cc:71:f9:
53:7d:38:2f:38:ee:3f:ca:47:d9:bb:52:a5:9c:fc:
9d:a6:f0:b6:52:7a:8a:2f:ec:21:76:dc:41:c5:12:
10:37:8d:2a:8e:6c:4e:91:73:db:1c:74:ae:a2:75:
31:da:44:60:c1:e3:67:1a:a2:ed:f8:b8:ac:7f:87:
27:5d:bc:da:37:69:b7:de:48:76:61:cd:e3:5f:f9:
ef:ca:aa:98:b7:9e:67:03:d2:b2:a3:a2:ae:17:d5:
42:ed:50:8c:7e:8d:1d:d9:8c:c4:0a:b1:0b:20:ad:
e1:91:95:c3:57:75:63:43:4f:1a:0b:8a:76:d2:e5:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:23:F0:A2:CE:5E:6A:92:F9:5D:57:00:F0:EC:27:26:E6:1A:A8:7F
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:f6:23:4e:9b:8e:86:ea:51:f7:54:f9:7b:d2:10:a7:fc:66:
27:e8:94:c1:64:30:10:b2:ec:a0:bf:2e:70:30:a2:a0:ac:6d:
99:b5:d4:1b:f4:aa:e5:28:9f:52:0c:d3:4b:d0:07:f8:f9:6b:
ab:27:9f:cd:53:35:4a:7c:8f:2b:34:8d:41:ef:ff:09:47:09:
03:9c:9a:a6:07:32:72:75:a5:38:a8:20:24:42:1e:b5:fc:a7:
2a:2e:d2:6f:a0:14:48:1d:dd:6f:05:59:79:aa:c1:17:2e:32:
1a:57:fc:5a:4f:d7:58:86:35:b6:b8:e6:73:b3:7a:7e:bc:ce:
22:a3:59:75:e9:18:ac:2a:b6:e3:70:95:cf:82:94:ba:40:23:
81:c1:36:fe:47:5d:15:3f:de:6d:80:7b:aa:de:e9:84:97:f8:
4d:94:4f:08:22:09:0d:b8:b4:89:f1:85:e2:e9:b4:b2:27:57:
44:ee:b0:64:a3:70:b5:32:0d:e5:7e:83:ff:53:1b:ca:b2:d8:
c7:fb:66:f7:35:c0:00:20:be:49:a2:ea:ea:38:a8:0b:8f:15:
3e:6d:db:d3:9b:d9:44:3b:68:c1:5a:a2:8c:28:48:f7:fd:a4:
b9:c0:f2:8a:44:23:34:1d:70:4d:eb:5d:88:7e:08:02:77:bd:
8d:8e:03:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAMNIRFGZuVqwHSyXCVumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMWYxZjQ1MmVlNjY5OGU5OWRmY2I0ZTNmNWFlZWIzYmMy
NTAzODUwHhcNMjUwODEwMjIwMTI5WhcNMjUwODExMjIwMTI5WjAzMTEwLwYDVQQD
Eyg4MTIzZjBhMmNlNWU2YTkyZjk1ZDU3MDBmMGVjMjcyNmU2MWFhODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGKq5AY6d9pK0kZwT5KpPrMEWmnF
HN1h8F0DeGqjyxLNpTi87ZZIjLvc/peg/IiUMLBGHDIMXJAYVFzwYMtYg/BuyuJV
RZXJjPVcYBaDb3YVu/ohSx4T6tRhCdxkQL+ZRZCsteLrTuodRHcUozYrmfPX2do4
xZYEZY898+cUAiNHuCzMcflTfTgvOO4/ykfZu1KlnPydpvC2UnqKL+whdtxBxRIQ
N40qjmxOkXPbHHSuonUx2kRgweNnGqLt+Lisf4cnXbzaN2m33kh2Yc3jX/nvyqqY
t55nA9Kyo6KuF9VC7VCMfo0d2YzECrELIK3hkZXDV3VjQ08aC4p20uWaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEj8KLOXmqS+V1XAPDsJybmGqh/MB8GA1UdIwQY
MBaAFA4fH0Uu5mmOmd/LTj9a7rO8JQOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDct
YjE5ZmJhMDNjMDZmLzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDctYjE5ZmJhMDNjMDZm
LzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1vYjTpuO
hupR91T5e9IQp/xmJ+iUwWQwELLsoL8ucDCioKxtmbXUG/Sq5SifUgzTS9AH+Plr
qyefzVM1SnyPKzSNQe//CUcJA5yapgcycnWlOKggJEIetfynKi7Sb6AUSB3dbwVZ
earBFy4yGlf8Wk/XWIY1trjmc7N6frzOIqNZdekYrCq243CVz4KUukAjgcE2/kdd
FT/ebYB7qt7phJf4TZRPCCIJDbi0ifGF4um0sidXRO6wZKNwtTIN5X6D/1MbyrLY
x/tm9zXAACC+SaLq6jioC48VPm3b05vZRDtowVqijChI9/2kucDyikQjNB1wTetd
iH4IAne9jY4DyA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:27 2025 by rpki-client